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Detailed Action 

1 . This action is responsive to communication filed on: 18 June 2007 with 
acknowledgement of original application filed on 22 August 2003, with acknowledgement of 
priority date of 23 August 2002, based on provisional application filing of 60/405,537. 

2. Claims 1-29 are currently pending in this application. Claims 1,13, and 23 are 
independent claims. 

Response to Arguments 

3. Applicant's arguments filed 1 8 June 2007 have been fully considered however they are 
not persuasive. 

I) In response to applicant's argument on page 2, "Neither Candelore ( 489 nor 
Candelore '162, taken along or in combination disclose or suggest the claimed invention ... 
Candelore '489 does not disclose to use a key register in a first body which cannot be 
overwritten after a programmability period, as substantially recited in Applicant's claims, and 
the Office action appears to acknowledge such deficiency of Candelore '489". 

The Examiner disagrees to argument presented. Candelore '489 teaches in col 7, 
lines 1-10 "The Unique Keys may be programmed into register 450 during manufacture. For 
example, in one embodiment, the descrambler IC has a non-volatile Unique Key register 450 that 
can be written only once. When the set top, TV, or NRSS-B module 401 is manufactured, the 
Unique Key register 450 is programmed. In this embodiment, there is no way to either read or 
overwrite the original keys that were loaded into register 450. An association between the host's 
(401) serial number and the Unique Key that was loaded the Descrambler IC of that host may be 
recorded". Therefore Candelore '489 teaches that the first key cannot be overwritten. 
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The 35 USC 103 (a) combination of Candelore '489 and Candelore 462 was used in the Office 
Action because the application as claimed in independent claim 13, includes the limitation of 
" activating a feature of the first chip package that prevents overwriting the first key in the first 
key storage register from outside the first chip package". This 'activation feature' is better 
taught in Candelore '162 page 2 5 paragraph 0030 "FIG. 3a illustrates a diagram of one 
embodiment of a configuration protocol for a lockable hard drive 105. At unit creation time, a 
configuration host 340 sends a status command to the hard drive 105 when the hard drive 105 
powers up. The hard drive 105 sends a status acknowledgement that contains a bit that flags 
whether or not the hard drive 105 has been "locked". If the hard drive 105 is unlocked, the 
power-up status is sent as "un-locked M to the configuration host 340. In response, the 
configuration host 340 sends a lock command including a first key that is then stored in the hard 
drive's memory. The hard drive 105 then sets the "lock" bit, preventing a re-loading of the first 
key in the hard drive. The hard drive 105 sends a lock acknowlement to the configuration host 
340". Note as indicated in the background of Candelore '162, paragraphs 0003-0004 the hard 
drive can be used with set-top boxes, home entertainment systems, or MP3 players, all of these 
are interpreted to be equivalent to "interchip content pathways transporting digital content 
objects within a content processing unit". 

II) In response to applicant's argument on page 2, "Candelore '162 merely discloses to 
restrict access to a hard drive by "locking' 1 the hard drive using a randomly generated key, 
hereafter referred to as the "hard drive locking key". Candelore '162, paras. [0030-0034]. The 
hard drive locking key discussed in Candelore l l62 does not appear to used by an encryption 
engine "to produce ciphertext content", as recited by at least Applicant 's claim 1 " 
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The Examiner disagrees with argument and notes that the encryption engine to produce 
ciphertext content is taught by Candelore '489. 

Ill) In response to applicant's argument beginning on page 2, "Moreover, the hard drive 
locking key is a randomly generated key which changes at each use, and hence is constantly 
overwritten. Candelore '162 para. [0031 J "the first key is a random number generated by the 
host each time a hard drive needs to be lockedf. TJhis is to prevent 'spoofing' and unlocked hard 
drive. " Candelore '162 also explains that the key is stored in "the hard drive 's flash memory", 
which is typically a rewritable memory ... Accordingly, Candelore l 162 also does not disclose to 
use a key register in a first body which cannot be overwritten after a programmability period, as 
substantially recited in Applicant 's claims 

The Examiner disagrees with argument and notes again that Candelore '489 teaches that 
Unique Keys may be programmed into register 450 during manufacture. For example, in one 
embodiment, the descrambler IC has a non-volatile Unique Key register 450 that can be written 
only once in col. 7, lines 1-10. The combination was used because Candelore '162 teaches the 
activating the locking feature. The argued feature of paragraph 0031 is just one embodiment of 
the Candelore '162 invention where the key is changed. The combination teaches that the 
manufactured key can be written only once see Candelore '489 col. 7, lines 1-10. 
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IV) In response to Applicant's argument on page 3, "Moreover, the hard drive locking key 
discussed in Candelore 162 is not a key used for encryption to produce cipher text, and hence is 
not analogous art to Applicant 's invention as it is not the same field of endeavor or concerned 
with the same problems faced by Applicant " 

The Examiner disagrees as stated in the background of the Candelore 6 162 invention the 
hard drive are used in entertainment systems such as set-top boxes. Therefore this is analogous 
art to Applicant's invention. The encryption is taught in Candelore '489. 

V) In response to Applicant's argument on page 3, "Finally, Candelore '162 actually 
appears to teach away from a system which prevent rewriting a key register since Candelore 
'162 discloses constantly change the key to avoid a concern of ghosting. Hence the combination 
of Candelore '489 and Candelore '162 does not produce the claimed invention as it does not 
disclose all the claimed limitation in of independent claims 1, 13, 22, or 23 

The Examiner disagrees with argument and notes again that Candelore '489 teaches that 
Unique Keys may be programmed into register 450 during manufacture. For example, in one 
embodiment, the descrambler IC has a non-vdatile Unique Key register 450 that can be written 
only once in col. 7, lines 1-10. The combination was used because Candelore '162 teaches the 
activating the locking feature. The argued feature of changing the key due to ghosting is just one 
embodiment of the Candelore c 162 invention where the key is changed. The combination 
teaches that the manufactured key can be written only once see Candelore 6 489 col. 7, lines 1-10. 



Application/Control Number: 10/647,064 
Art Unit: 2134 



Page 6 



VI) In response to Applicant's argument on page 3, 11 Moreover .the combination is improper 
as applied against the claimed invention because Candelore '162 is not analogous art and 
actually teaches away from Applicant's invention The Examiner disagrees as stated in the 
background of the Candelore 6 162 invention the hard drives are used in entertainment systems 
such as set-top boxes. Therefore this is analogous art to Applicant's invention. The encryption 
is taught in Candelore '489. In addition writing the key once to memory is taught in Candelore 
'489 col. 7, lines 1-10 as well Candelroe 6 162 page 3, paragraph 0040 "In one embodiment, the 
lock bit is written to one time programmable (OTP) memory and not changeable" which teaches 
the lock bit is written to one time and locked to the host device such as a set-top box. In addition 
Candelore '489 and Candelore '162 contain the same inventor 'Candelore and same assignee 
both invention are directed to analogous art of protecting digital content utilized in entertainment 
systems that utilize set-top boxes see Candelore '489 col. 2, lines 33-44 "" and Candelore '162 
page 1, paragraphs 0003-0006. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject matter 
sought to be patented and the prior art are such that the subject matter as a whole would have 
been obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains. Patentability shall not be negatived by the manner in which 
the invention was made. 
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5. Claims 1-29, are rejected under 35 U.S.C. 103(a) as being unpatentable over Candelore 
U.S. Patent 6,697,489 (hereinafter '489) in view of Candelore et al. US Patent Application 
Publication No. 2003/0188162 (hereinafter '162). 

As to independent claim 13, "A method for protecting interchip content pathways 
transporting digital content objects within a content processing unit, the method 
comprising steps of: loading a first key into a first key storage register in a first chip 
package, wherein the first key in the first key storage register is non-readable from outside 
the first chip package" is taught in '489 col. 5, lines 63-65, note the first chip package is 
interpreted equivalent to the smart card; 

"encrypting digital content with the first key to produce ciphertext content" is 
disclosed in col. 7, lines 11-14, note the first key, is the unique key which is also in the unit, (set 
top box or equivalent conditional access system), the ciphertext content produced by the smart 
card is the encrypted CW, smart cards are non-readable from outside; 

"coupling the ciphertext content from the first chip package to a content pathway; 
loading a second key into a second key storage register in a second chip package, wherein 
the second key in the second key storage register is non-readable from outside the second 
chip package; coupling the ciphertext content from the content pathway to a second chip 
package; and decrypting the ciphertext content with the second key to reformulate the 
digital conten" is shown in '489 col. 7, lines 30-36, the decryption engine uses the CW, i.e. the 
second key to produce plaintext content; 

the following is not explicitly taught in '489: "activating a feature of the first chip package 
that prevents overwriting the first key in the first key storage register from outside the first 
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chip package" however '162 teaches on page 2, paragraph 0030 "FIG. 3a illustrates a diagram 
of one embodiment of a configuration protocol for a lockable hard drive 105. At unit creation 
time, a configuration host 340 sends a status command to the hard drive 105 when the hard drive 
105 powers up. The hard drive 105 sends a status acknowledgement that contains a bit that flags 
whether or not the hard drive 105 has been "locked". If the hard drive 105 is unlocked, the 
power-up status is sent as "un-locked" to the configuration host 340. In response, the 
configuration host 340 sends a lock command including a first key that is then stored in the hard 
drive's memory. The hard drive 105 then sets the "lock" bit, preventing a re-loading of the first 
key in the hard drive. The hard drive 105 sends a lock acknowlement to the configuration host 
340". 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
a method of securing Control Words (CWs) taught in '489 to include a means locking the unit to 
prevent over- writing of keys. One of ordinary skill in the art would have been motivated to 
perform such a modification because a protection mechanisms is needed to prevent the removal 
processors in order to gain unauthorized use of digital content see '162 (page 1, paragraph 0005). 
"Since an increasing number of electronic devices are becoming hard drive enabled, many of 
these electronic devices are subsidized by service providers to lower the initial cost for a 
customer. A problem exists today where buyers are capitalizing on the subsidized appliances by 
removing the hard drive from the electronic device and using it elsewhere. Hard drives may be 
taken out of the electronic device, and used for other purposes that were not intended by the 
electronic device manufacturer or service provider. For example, a hard drive in a set-top box 
may be physically removed from the set-top box. Once removed, the hard drive may be utilized 
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with any number of hosts, one being a personal computer. The user benefits by not having to buy 
an additional hard drive and saving money as a result". In addition at least one inventor of '489 
and ' 162 are the same, and the inventions are directed to similar subject matter, protection of 
digital content and the use of set top boxes. 

As to dependent claim 14, "further comprising steps of: providing a key encryption 
key in the at least one of the first and second chip packages; and decrypting at least one of 
the first and second keys with the key encryption key, whereby the at least one of the first 
and second keys is protected with the key encryption key outside the first chip package" is 
shown in '489 col. 6, lines 26-44. 

As to dependent claim 15, "further comprising a step of overwriting the second key 
in the second key storage register from outside the second chip package" is taught in '489 
col. 7, lines 15-20 that the unique key can be changed with a EMM message in '489. 

As to dependent claim 16, "further comprising steps of: encrypting the digital 
content or a derivative thereof in the second chip package to produce second ciphertext 
content using the second key or another key that is a function of the second key, coupling 
the second ciphertext content to a second content pathway" is shown in '489 col. 7, line 59 
through col. 8, line 19. 

As to dependent claim 17, "further comprising steps of: coupling the second 
ciphertext content from the second content pathway to a third chip package; and 
decrypting the second ciphertext content with the third key to reformulate the digital 
content" is disclosed in '489 col. 7, line 59 through col. 8, line 19. 
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As to dependent claim 18, "wherein: the content processing unit is part of a larger 
system comprising a plurality of functionally equivalent content processing units, and each 
of the plurality uses a different first key to protect their respective content pathways" is 

disclosed in '489 teaches that the unique keys can be programmed during manufacture of the set 
top, TV, or NRSS-B module and '489 teaches that the traditional smart card could be replaced 
with a headend in col. 7, lines 59-65, the headend can deliver service keys encrypted based on • 
the unique of the IC descrambler, the larger system is the cable network. 

As to dependent claim 19, "further comprising steps of: replacing at least one of the 
first and second chip packages; querying a database for at least one of the first and second 
keys; and loading at least one first and second keys into its respective chip package" is 
disclosed in '489 col. 8, lines 58-65. 

As to dependent claim 20, "further comprising steps of: replacing at least one of the 
first and second chip packages; and activating a secure re-start feature to load at least one 
of the first and second keys into its respective chip package from another chip package" is 
taught in '489 col. 7, lines 15-20 that the unique key can be changed with a EMM message or 
with a new smart card. 

As to dependent claims 21 and 22, these claims are directed to a computer system or 
computer readable medium adapted to perform the computer-implementable method of claim 13; 
therefore they are rejected along similar rationale. 

As to independent claim 1, "A content processing unit for protecting interchip 
content pathways transporting digital content objects, the content processing unit 
comprising: a first chip package, wherein the first chip package comprises a first body" is 
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taught in '489 col. 5, lines 63-65, note the first chip package is interpreted equivalent to the smart 
card; 

"a first plurality of interconnects" '489 teaches a plurality of interconnects to the smart 
card, i.e. by inserting into the conditional access system, programmed by manufacture, in col. 5, 
lines 29-49; 

"an encryption engine, and" is shown in '489 col. 5, lines 36-37, note a smart card 
contains a cryptographic processor, i.e. encryption engine; 

"a first key storage register capable of storing a first key wherein: the first key is 
used by the encryption engine to produce ciphertext content, the first key storage register is 
non-readable from outside the first body" is disclosed in col. 7, lines 11-14, note the first key, 
is the unique key which is also in the unit, (set top box or equivalent conditional access system), 
the ciphertext content produced by the smart card is the encrypted CW, smart cards are non- 
readable from outside; 

"a second chip package, wherein the second chip package comprises: a second 
body" and "a decryption engine", is taught in '489 col. 7, lines 1-4; 

"a second plurality of interconnects" '489 teaches several different kinds of 
interconnect to the second package, i.e. the conditional access unit in col. 5, line 65 through col. 
7, line 15; 

"and a second key storage register capable of storing a second key, wherein: the 
second key is used by the decryption engine to produce plaintext content from the 
ciphertext content" is shown in '489 col. 7, lines 30-36, the decryption engine uses the CW, i.e. 
the second key to produce plaintext content; 
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"and the second key storage register is non-readable from outside the second body" 
is disclosed in '489 col. 6, lines 26-36; 

"a content pathway coupling a first subset of the first plurality and a second subset 
of the second plurality, wherein the content pathway transports the digital content objects 
as the ciphertext content" fi 489 teaches utilizing the smart card to receive encrypted CW and 
saving this CW for later use in col. 7, line 59 through col. 8, line 7; 

the following is not explicitly taught in '489: "and the first key storage register cannot be 
overwritten after a programmability period" however '162 teaches on page 2, paragraph 
0030 "FIG. 3a illustrates a diagram of one embodiment of a configuration protocol for a lockable 
hard drive 105. At unit creation time, a configuration host 340 sends a status command to the 
hard drive 105 when the hard drive 105 powers up. The hard drive 105 sends a status 
acknowledgement that contains a bit that flags whether or not the hard drive 105 has been 
"locked". If the hard drive 105 is unlocked, the power-up status is sent as "un-locked" to the 
configuration host 340. In response, the configuration host 340 sends a lock command including 
a first key that is then stored in the hard drive's memory. The hard drive 105 then sets the "lock" 
bit, preventing a re-loading of the first key in the hard drive. The hard drive 105 sends a lock 
acknowlement to the configuration host 340"; 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
a method of securing Control Words (CWs) taught in '489 to include a means locking the unit to 
prevent over- writing of keys. One of ordinary skill in the art would have been motivated to 
perform such a modification because a protection mechanisms is needed to prevent the removal 
processors in order to gain unauthorized use of digital content see '162 (page 1, paragraph 0005). 
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"Since an increasing number of electronic devices are becoming hard drive enabled, many of 
these electronic devices are subsidized by service providers to lower the initial cost for a 
customer. A problem exists today where buyers are capitalizing on the subsidized appliances by 
removing the hard drive from the electronic device and using it elsewhere. Hard drives may be 
taken out of the electronic device, and used for other purposes that were not intended by the 
electronic device manufacturer or service provider. For example, a hard drive in a set-top box 
may be physically removed from the set-top box. Once removed, the hard drive may be utilized 
with any number of hosts, one being a personal computer. The user benefits by not having to buy 
an additional hard drive and saving money as a result". In addition at least one inventor of '489 
and ' 162 are the same, and the inventions are directed to similar subject matter, protection of 
digital content and the use of set top boxes. 

As to dependent claim 2, "wherein the programmability period ends when a 
command is sent to the first plurality" is taught in '489 col. 7, lines 15-20 that the unique key 
can be changed with a EMM message in '489. 

As to dependent claim 3, "wherein the command activates a fusable link" however 
'162 teaches in claim 15, on page 5 that the lock bit can be set by a fuse. The motivation to 
combine '162 and '489 is the same as stated above in claim 1 . 

As to dependent claim 4, "wherein the programmability period ends after writing to 
the first key storage register" is taught in '489 col. 7, lines 1-4. 

As to dependent claim 5, "wherein: the content processing unit is a set top box, and 
the first chip package is a conditional access chip" is disclosed in '489 col. 7, lines 1-15. 
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As to dependent claim 6, "wherein at least one of the first and second chip packages 
comprises a plurality of semiconductor substrates" is taught in '489 col. 7, lines 1-15. 

As to dependent claim 7, "wherein: at least one of the first and second chip packages 
further comprises a key encryption key, and at least one of the first and second keys is 
protected with the key encryption key outside the first body" is shown in '489 col. 6, 
lines 26-44. 

As to dependent claim 8, "wherein the second key storage register is overwritable by 
manipulating the second plurality" '489 teaches that the CWs could only be valid for a certain 
period of time and that the register can store multiple keys, therefore it is obvious that the second 
key storage register would be over written. 

As to dependent claim 9, "wherein: the second chip package further comprises a 
second encryption engine, and the second encryption engine uses the second key or another 
key that is a function of the second key to encrypt the content object or a derivative 
thereof is shown in '489 col. 7, line 59 through col. 8, line 19. 

As to dependent claim 10, "further comprising a third chip package comprising a 
third key that can decrypt ciphertext produced with the second encryption engine" is 
disclosed in '489 col. 7, line 59 through col. 8, line 19. 

As to dependent claim 11, "wherein: the content processing unit is part of a larger 
system comprising a third plurality of functionally equivalent content processing units, and 
each of the third plurality uses a different first key to protect their respective content 
pathways" is disclosed in '489 teaches that the unique keys can be programmed during 
manufacture of the set top, TV, or NRSS-B module and '489 teaches that the traditional smart 
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card could be replaced with a headend in col. 7, lines 59-65, the headend can deliver service keys 
encrypted based on the unique of the IC descrambler, the larger system is the cable network. 

As to dependent claim 12, "wherein the digital content objects are either 
compressed or non-compressed" is taught in '489 col. 8, lines 50-58. 

As to independent claim 23, this claim contains substantially similar subject matter as 
independent claim 1; therefore it is rejected along the same rationale. The Examiner interprets 
"the first key storage cannot be overwritten after being written once" equivalent to "the first key 
storage cannot be overwritten after a programmability period". Since in claim 23 the period is 
zero. 

As to dependent claim 24, "wherein: the first key storage register has a third 
plurality of bits, and each of the third plurality can only change its stored value, at most, 
one time" however '162 teaches "In one embodiment, the lock bit is written to one time 
programmable (OTP) memory and not changeable. In alternative embodiments, the lock bit may 
be re-programmable. Under the right conditions, the use of a master key may be used to revert 
the hard drive to an un-locked condition" on page 3, paragraph 0040. 

As to dependent claim 25, "wherein: at least one of the first and second chip 
packages further comprises a key encryption key, and at least one of the first and second 
keys is protected with the key encryption key outside the first body" is taught in 489 col. 5, 
lines 29-32 and col. 6, lines 16-36. 

As to dependent claim 26-29, these claims contain substantially similar subject matter as 
claims 8-11; therefore they are rejected along similar rationale. 
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It is noted that any citations to specific, pages, columns, lines, or figures in the prior art 
references and any interpretation of the references should not be considered to be limiting in any 
way. A reference is relevant for all it contains and may be relied upon for all that it would have 
reasonably suggested to one having ordinary skill in the art. See, MPEP 2123. 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time policy as 
set forth in 37 CFR 1.136(a). A shortened statutory period for reply to this final action is set to 
expire THREE MONTHS from the mailing date of this action. In the event a first reply is filed 
within TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the shortened 
statutory period will expire on the date the advisory action is mailed, and any extension fee 
pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In 
no event, however, will the statutory period for reply expire later than SIX MONTHS from the 
mailing date of this final action. 

6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Ellen C Tran whose telephone number is 
(571) 272-3842. The examiner can normally be reached from 6:00 am to 4:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571) 272-381 1. The fax phone number for the 
organization where this application or proceeding is assigned is (571) 273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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